HEART  TO  HEART:  Innovative  software  brings  diagnostic 
cardiac  care  to  remote  villages  in  India.  PAGE  28 
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Pervasive  computing  is 
almost  at  your  fingertips. 
I  earn  more. 
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News  Analysis 

Companies  like  IBM 
and  Zappos.com  are 
using  social  networks 
to  reach  customers 
and  workers,  page  12 

Should  a  spy  agency 
be  trusted  to  protect 
the  data  in  federal 
systems?  paoe  ie 

THE  GRILL:  FedEx 
CIO  Rob  Carter  talks 
about  the  recession 
and  the  future  of 


Opinions 

What  will  H  take  to 
wire  the  85%  of  the 
world  that’s  still  not 
online?  page  19 

Google  may  replace 
Microsoft  as  the 
tech  industry’s  ‘Evil 
Empire.’  Expect  more 
antitrust  scrutiny  in 
its  future,  page  34 


Security 

Protecting  virtualized 
systems  requires  a 
creative  mix  of  old  and 
new  tactics,  page  26 
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WELCOME  TO  A  PLACE  WHERE  ANYTHING  IS  POSSII 


WHERE  IF  YOU  DREAM 


FROM  DATACENTER  TO  DESKTOP. 


YOU  DO  MORE.  YOU  SAVE  MORE. 


THE  BARRIERS  TO  VIRTUALIZATION  FALL  AWAY. 


HOW  FAR  WILL  YOU  TAKE  VIRTUAL? 


microsoft.com/virtualization 
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■  FEATURES 

20  PC  2019 

COVER  STORY:  Whether  it's  a  souped-up  smartphone 
with  a  magic  monitor  or  an  integrated  personal  valet,  one 
thing  is  certain:  The  PC  of  tomorrow  will  put  data  at  your 
fingertips  wherever  you  are. 

26  Securing  Your 
Virtualized  Environment 

Protecting  virtualized  resources  requires  a  flexible 
mix  of  old  and  new  security  tactics. 


28  Heart  to  Heart 

COMPUTERWORLD  HONORS:  The  Byrraju  Foundation 
uses  telemedicine  tools  to  provide  diagnostic  cardiac  care 
to  people  in  rural  villages  in  India. 


Lean  price.  Mean  technology. 


HP  BladeSystem  c3000  Enclosure 

$3,499  (Save  s2,319) 


HP  ProUant  DL385  G5p  Rack  Server 

$2,929  (Save  51,017) 

Buy 


HP  Ultrium  448  SAS 
Internal  Tape  Drive  Bundle 


M,149  (Save  s349) 


HP  ProLiant  BL465c  G5  Server  Blade 

*1,539  (Save  s450) 


To  learn  more 


Special  0%  financing  for  up  to  36  months  also  available? 
3,  call  1-888-280-3545  or  visit  hp.com/servers/affordable27 


I  EDITOR’S  NOTE 


Don  Tennant 

Fingers  Crossed 


THE  SHORTSIGHTEDNESS  is  astonishing.  Com¬ 
panies  are  panicking,  and  they’re  taking  drastic 
steps  to  cut  costs.  But  rather  than  bothering  to  seek 
out  hidden  costs,  many  are  looking  no  further  than 
a  number  on  a  spreadsheet,  and  they’re  cutting  their  people. 
What  should  be  an  absolute  last  resort  has  become,  in  far  too 
many  cases,  an  expedient  first  response. 


I  hear  from  a  lot  of  IT 
workers  who  are  frustrated 
that  their  companies  aren’t 
doing  more  to  force  ven¬ 
dors  to  shoulder  more  of 
the  burden.  It’s  clear  that 
more  information-sharing 
between  IT  executives  on 
ways  to  accomplish  that  is 
needed.  What’s  encourag¬ 
ing  is  that  there’s  plenty  of 
information  to  be  shared. 

Dale  Frantz,  CIO  at  Auto 
Warehousing  Co,  is  in  the 
unenviable  position  of  sup¬ 

porting  a  business  that's  de¬ 
pendent  on  the  fortunes  of 
the  automotive  industry,  so 
you  can  imagine  the  lengths 
he’s  had  to  go  to  in  order  to 
cut  costs.  Frantz  is  the  nic¬ 
est  guy  you’d  ever  want  to 
meet,  but  his  vendors  prob¬ 
ably  think  otherwise. 

Frantz  said  that  in  many 
cases,  when  vendors  refuse 
to  renegotiate,  he  just  can¬ 
cels  the  contract.  He  exer¬ 
cised  a  performance  clause, 
for  example,  to  cancel  the 
contract  for  his  MPLS  com¬ 
munications  link  between 
the  U.S.  and  Canada.  He’s 
also  reducing  technical 
support  coverage  for  some 
noncritical  systems  from 


24/7/365  to  weekdays  from 
8  a.m.  to  8  p.m.  —  a  rela¬ 
tively  minimal  increase  in 
risk,  considering  the  sav¬ 
ings  it’s  generating. 

Savvy  IT  executives  rec¬ 
ognize  that  their  vendors 
are  in  a  vulnerable  position, 
and  they  have  the  business 
sense  to  seize  the  moment. 
“Vendors  that  once  held 
themselves  in  the  highest 
regard  and  treated  midsize 
businesses  as  dirt  are  now 
targeting  this  sector,”  said 
Steve  Romeo,  vice  presi¬ 
dent  of  IT  at  orthopedic 
product  supplier  Breg  Inc. 
“We  have  the  attention  of 
vendors  in  a  way  we’ve 
never  seen  before." 

Vendors  are  hurting 
as  much  as  customers,  so 
they’re  doing  their  utmost 
to  avoid  having  to  renegoti¬ 
ate.  said  Manjit  Singh,  CIO 
at  Chiquita  Brands  Inter¬ 
national.  “However,  when 


■  The  large  ven¬ 
dors  are  starting 
to  buckle.  Even 
Microsoft  is  get¬ 
ting  the  message. 


faced  with  an  ‘all  [lost]  or 
something  [retained]'  situ¬ 
ation.  many  are  willing  to 
become  more  flexible.” 

Mike  Twohig,  CIO  at 
Clean  Harbors  Environ¬ 
mental  Services,  said  the 
larger  vendors  have  been 
slower  to  react,  so  you  need 
to  be  a  little  more  aggressive 
to  get  their  attention.  "We 
have  one  very  large  vendor 
who  will  be  losing  over 
$500,000  in  sales  because 
they  would  not  negotiate 
on  a  product  for  which  we 
have  alternatives,"  Twohig 
said.  “Their  first  reaction 
was  disbelief,”  but  they’re 
beginning  to  understand 
that  they  have  to  reconsid¬ 
er  their  pricing  structure. 

“In  the  past,  these  large 
vendors  have  been  consid¬ 
ered  ’partners,’ "  Twohig 
said.  “But  those  that  are 
slow  to  respond  have 
been  informed  that  they 
are  slipping  back  to  just  a 
‘vendor’  that  we  consider  a 

There’s  no  question  that 
the  large  vendors  are  start¬ 
ing  to  buckle.  Even  Micro¬ 
soft  is  getting  the  message. 
Just  last  week,  Computer- 


world’s  Eric  Lai  reported 
that  Microsoft  is  cutting 
the  cost  of  its  Software 
Assurance  agreements  by 
as  much  as  26%. 

That  brings  us  back 
to  Auto  Warehousing. 

You  may  recall  that  two 
years  ago,  Frantz  began  a 
sweeping  migration  from 
Microsoft  to  Apple  systems 
because  he’d  been  so  badly 
jerked  around  by  Micro¬ 
soft's  software  licensing 
apparatchiks.  To  date,  that 
move  has  saved  roughly 
$1  million  in  license  fees. 

What  that  has  meant  is 
that  despite  the  collapse  of 
the  auto  industry,  the  num¬ 
ber  of  layoffs  of  IT  person¬ 
nel  at  Auto  Warehousing 
stands  at  zero.  That’s  right. 
Zero.  “Other  departments 
and  divisions  have  had 
layoffs,”  Frantz  said,  “but 
we've  cut  enough  out  of 
our  budget ...  to  keep  all 
of  our  people.” 

For  Frantz,  layoffs  would 
be  the  last  resort,  and  you 
can  be  sure  that  employees 
will  remember  that  when 
the  economy  turns  around. 
“There’s  been  some  move¬ 
ment  in  the  auto  industry .. . 
that  shows  a  glimmer  of 
hope,"  Frantz  said.  “Keep 
your  fingers  crossed.” 

I  told  him  I  would.  But 
Til  be  hoping  even  more 
that  IT  pros  everywhere 
will  follow  his  example.  ■ 
Don  Tennant  is  Computer- 
world’s  senior  editor- 
at-large.  You  can  contact 
him  at  don_tennant@ 
computerworld.com,  and 
visit  his  blog  at  http// 
blogs.computerworld.com/ 
tennant. 
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Problems  Won’t  Be 
Solved  by  a  Select  Few 

I  was  introduced  to  Computerworld 
in  the  mid-'90s  when  I  dug  it  out  of 
the  trash  of  different  executives  at 
the  company  I  worked  at.  I  was  the 
only  one  who  regularly  read  it,  al¬ 
though  it  didn’t  get  sent  to  me. 
When  I  left  that  company,  I  was 


fixed  in  the  human  area  of  IT  and 
are  willing  and  able  to  do  so. 

■  Levi  Knox,  systems  analyst, 

Canon  City,  Colo. 

Diversity  of  Thought  Is  a 
Must  in  the  Workplace 

In  his  March  2  editorial,  “Unwind- 


THE  WEEK  AHEAD 


WS, 
2ESt 


CIO,  Vivek  Kundra 
took  a  leave  from  that 
iob  last  Thursday,  following 
the  bribery-related  arrests 
of  a  former  subordinate  in 
the  District  of  Columbia’s  IT 
department  and  the  CEO  of 
in  outsourcing  contractor. 

The  FBI  arrested  the  two 
men  and  raided  the  district 
s  IT  offices, 


Kundra  is  taking  a  leave  of 
absence;  an  administration 
official  who  asked  not  to  be 
named  wouldn’t  discuss  the 
reasons  for  the  leave  or  say 
how  long  it  might  last. 

FBI  agents  said  they 
found  $70,000  in  cash  in  the 
Washington  home  of 
Kundra’s  onetime  sub¬ 
ordinate  Yusuf  Acar 
after  arresting  him  on 
bribery  charges.  Acar, 
who  is  the  district’s 
acting  chief  security 
officer,  was  ordered 


center  technologies  (see  story  below). 

WEDNESDAY:  Microsoft’s  Mi>09  conference  for  Web  she 
designers  and  developers  opens  in  Las  Vegas. 
WEDNESDAY:  Oracle  plans  to  report  its  Q3  financial  results. 


Fed  CIO  Takes  Leave  After 
Arrest  of  Ex-Subordinate 


awarded  after  Kundra  be¬ 
came  CTO  in  2007. 

In  an  affidavit,  prosecu¬ 
tors  alleged  that  Acar  sub¬ 
mitted  purchase  orders  to 
AITC  for  larger  quantities 
of  products  than  were  actu¬ 
ally  delivered.  For  instance, 
the  affidavit  cited  AITC's 
purchase  of 500  McAfee  Inc. 
security  software  licenses 
on  behalf  of  the  district’s 
government.  But,  it  said, 
the  outsourcer  charged  the 
IT  department  for  2,000  li¬ 
censes,  at  an  additional  cost 
of  $67,321. 

The  arrests  and  raid  took 
place  while  Kundra  was 
speaking  at  the  FOSE  2009 


Cisco  Set  to 
Unveil  First 
Blade  Server 


Analysts  said  the  new 
Intel-based  blade  server, 
code-named  California.  Is 
designed  to  manage  and 


to  make  it  easier  for  compa¬ 
nies  to  virtualize  systems, 
said  Cisco  Chief  Technology 
Officer  Padmasree  Warrior 
in  a  blogpost 
Today's  announcement, 
to  be  hostad  by  CEO  John 
Chambers,  is  ths  latest  part 
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IT  ECONOMY 

HP,  Microsoft  Offer  Deals 

consulting  hrm  Ovum,  said  HP 
is  clearly  being  driven  by  the 

To  Help  Stretch  IT  Dollars 

L00KIN6  TO  MAKE  its  out-  !  service  levels  for  individual 

sourcing  and  IT  services  more  !  applications  based  on  their 
affordable  in  a  down  economy,  1  importance  -  with  HP's  pricing 
Hewlett-Packard  Co.  last  week  '  varying  accordingly, 
said  H  is  adopting  variable  pric-  ;  The  new  approach  could  low¬ 
ing  that  will  be  based  on  the  ;  er  application  support  costs  by 

service  levels  users  choose.  ;  up  to  40%  for  some  users,  said 

For  instance,  customers  !  Jeff  Womack,  vice  president  of 

of  HP’s  EOS  unit  wHI  be  able  :  product  marketing  at  EDS. 
to  specify  dHferent  support  1  John  Madden,  an  analyst  at 

recession.  “If  you  have  custom¬ 
ers  that  are  hurting  financially,” 
Madden  said,  “do  you  pound 
them  over  and  over  with  the 
same  terms?"  But.  he  added. 

HP  also  may  be  looking  at  the 
competitive  challenges  that 
vendors  like  EDS  face  from 
cloud  computing  services. 

Microsoft  Corp.  is  also  offer¬ 
ing  some  price  breaks,  through 
deals  that  let  users  save  up  to 
26%  on  software  licenses  and 

the  company’s  Software  Assur- 

“One  reseller  Itaked  to  says  he 
has  never  seen  Microsoft  doing 
this  level  of  promotion  and  price- 
cutting  in  the  enterprise  space,' 
said  Paul  DeGroot  an  analyst  at 
Directions  on  Microsoft. 

-PATRICK  THIBODEAU 

AND  ERIC  LAI 
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■  NEWS  DIGEST 


BETWEEN  THE  LINES 


Bill  Would  Clarify  Rules  on 
Data  Breach  Disclosures 


cation  law  said  that  a  new 
bill  he  filed  late  last  year 
would  standardize 
the  process  of  notify¬ 
ing  consumers  and 
nt  agencies 
of  data  breaches  that 


information.  "We  actually 
have  very  poor  data  on  data 
breaches,”  Cate  said,  noting 
laws  mostly 


agencies  do  a  good  job  of 
telling  affected  users  exactly 
what  happened  to  their  data, 
a  “substantial  number"  do 


ispatchcs 

U.K.  Police  Lose 
Crime-Data  Card 

EDINBURGH.  Scotland -A 

memory  stick  containing  un¬ 
encrypted  information  on  hun¬ 
dreds  of  Lothian  and  Borders 


The  USB  memory  stick  was 


■  NEWS  ANALYSIS 


twitter.zappos..  o 


tuuikter 


Hey  there!  zappos  is  using  Twitter. 

Zappos  Twiner  is  a  free  service  that  lets  you  keep  in  touch  with  pt 
CEO  through  the  exchange  of  quick,  frequent  answers  to  one 
simple  question.  What  are  you  doing7  Join  today  to  start 
receiving  zappos's  updates. 


Zapppsr  zappos 


While  boarding  plane, 
zipes  maintenance  man  comes  out  of 
CEO  cockpit  carrying  big  piece  of 
metal  hardware  w/  dangling 
.  wires.  Urn,  found  an  extra  part? 


rgkapg 


Web  2.0  Tools  Can 
Foster  Growth 
In  Hard  Times 

But  analysts  warn  that  companies 
should  be  prepared  for  potential 
online  user  attacks.  By  Sharon  Gaudin 


Zappos.com  provides  a  separate 
Twitter  page  for  CEO  Tony  Hsieh 
and  a  list  of  public  tweets  about 
the  company. 

state  of  the  economy. 

The  goal  is  to  respond  to 
customer  comments  and 
form  personal  connections 
with  their  Twitter  followers, 
as  well  as  with  friends  on 
Facebook,  where  employees 
post  blogs  and  videos. 

The  tweets  and  posts  are 
a  way  to  give  customers 
and  other  curious  social 
network  members  a  way  to 
get  a  glimpse  at  the  inside 
workings  of  the  company. 

“Today,  consumers  have 
access  to  so  much  informa¬ 
tion,”  said  Aaron  Magness, 
director  of  business  develop¬ 
ment  at  Zappos.com.  “You 
can  buy  the  same  shirts  at 
Zappos  as  at  somewhere 
else.  The  product  almost  be¬ 
comes  less  important;  it  be- 


There  are  a  number  of  ways  to  protect  your  network. 
The  first  should  be  to  give  CDW  a  call. 


worms,  viruse . 
horses,  rootkits  and  hackers 


users  on  managed  and  unmanaged  endpoints 

•  Combines  feature-rich  VPN  connectivity  with 
comprehensive  threat  defense  to  deliver 
cost-effective  remote  network  access 

•  Prevents  unauthorized  access  to  applications 
or  information  assets  by  providing  fine-grain 


s41499 


•  Utilizes  a  breakthrough  multi-core  hardware 
design  and  patented  reassembly-free  DPI  with 

•  Delivers  real-time  network  protection  without 

•  Offers  high-quality  threat  prevention,  rapid 
deployment  and  lowered  TCO 

•  Combines  high-speed  intrusion  prevention,  file  and 
content  inspection  and  powerful  application  firewall 
capabilities  with  an  extensive  array  of  advanced 


Symantec M  Endpoint  Protection  11.0 

•  Combines  Symantec  AntiVirus '  with  advanced  threat 
prevention  in  a  single  agent,  delivering  an  unmatched 
defense  against  malware  for  notebooks,  desktops 


s1993" 


We’re  there  with  the  security  solutions  you  need. 

Security  threats  won't  get  on  your  network  if  they  can't  get  to  the  network.  That’s  why  gateway  security  is 
so  important.  CDW  has  a  wide  selection  of  top-name  firewall  protection,  antivirus,  antispyware,  intrusion 
prevention  and  more.  Our  personal  account  managers  along  with  our  highly  trained  technology  specialists 
have  the  expertise  you  need  to  ensure  your  network  is  fortified  and  secure.  So  call  CDW  today.  And 
eliminate  threats  before  they  even  become  threats.  . 

CDW.com  |  800.399.4CDW 


The  Right  Technology.  Right  Away. 


It  takes  a  dynamic  infrastructure  to 
sustain  growth  while  staying  green. 

A  business  is  like  a  tree.  It  relies  on  a  strong  root  system  to  grow 
and  thrive  in  a  changing  environment.  NEC's  Dynamic  IT  Infrastructure 
provides  the  resilience  and  flexibility  necessary  for  a  successful  enterprise 
to  evolve,  grow  and  succeed.  Our  portfolio  of  hardware,  software,  services 
and  solutions  provides  every  element  of  an  integrated  IT  infrastructure. 

This  flexible  architecture  lowers  your  total  cost  of  ownership  by  enabling 
scalability,  adaptability  and  evolution  without  forklift  upgrades,  while 
collectively  minimizing  the  carbon  footprint  and  impact  on  the  environment. 

As  a  global  IT  and  networking  powerhouse,  NEC  provides  such  innovative 
IT  infrastructure  solutions  and  more.  Whatever  your  challenge,  you  can  be 
sure  of  one  thing.  NEC  empowers  you  through  innovation. 


Empowered  by  Innovation 


NEC 


■  NEWS  ANALYSIS 


DHS  Exec’s  Exit 
Raises  Red  Flags  on 
NSA’s  Security  Role 


Critics  contend  that  the  spy 
agency  shouldn’t  take  the 
lead  on  federal  cybersecurity 
efforts.  By  Jaikumar  Vijayan 


THE  ABRUPT  cybersecurity  is  “a  bad  strat- 

resignation  of  egy  on  multiple  grounds,” 

one  of  the  U.S.  Beckstrom  contended.  The 

government's  intelligence  culture  is  “very 

top  cybersecu-  different  than  a  network  op- 
rity  officials  has  exposed  erations  or  security  culture,” 
widespread  —  though  not  he  wrote,  adding  that  the 


critics  said  in  interviews. 

The  NSA's  “strength  lies 
in  breaking  into  networks,” 
said  Gartner  Inc.  analyst 
John  Pescatore.  And  while 
the  agency’s  top-secret 
nature  is  obviously  appro¬ 
priate  for  spying,  it's  the 
“exact  opposite”  of  what  is 
required  on  cybersecurity 
initiatives  outside  of  the 
military,  he  said. 

The  NSA  does  have  an 
information  assurance  unit 
that  coexists  with  its  eaves¬ 
dropping  operations  n 
and  provides  a  wide  1 


NSA  to  protect  data.  But  he 
said  that  it  has  “the  greatest 
repository  of  cyber  talent” 
in  the  government  and  that 
its  capabilities  should  be 
“harnessed  and  built  on.” 

The  NSA  also  has  its 
supporters  outside  of  the 
government.  For  instance, 
Alan  Paller,  director  of 
research  at  the  SANS  Insti¬ 
tute,  a  security  research  and 
training  organization  that 
has  worked  jointly  with  the 
NSA,  said  the  leadership 
shown  by  the  agency  and 
the  Department  of  Defense 
has  been  “the  only  bright 
spot  in  a  desolate  federal 
cybersecurity  landscape." 

And  it's  not  like  the  DHS 
has  a  lot  of  fans  —  the  agen¬ 
cy  was  roundly  slammed 
at  last  week’s  hearing.  Da¬ 
vid  Powner,  director  of  IT 
management  issues  at  the 
Government  Accountabil- 

- ity  Office,  said  it's 

obvious  that  the 


Agency's  expanding  role  in  not  have  control  over  them.  services,  including  4m 

federal  security  initiatives.  Similar  sentiments  were  vulnerability  analy-  i  ■' 
Rod  Beckstrom  stepped  voiced  at  a  congressional  sis  and  a  24/7  threat 

down  as  head  of  the  National  hearing  on  cybersecurity  is-  warning  capability.  I 

Cybersecurity  Center  on  sues  last  week.  For  instance.  But  those  dual 


■  THE  GRILL 

Rob  Carter 

FedEx’s  CIO  talks  about  recession 
cleanups,  a  challenging  customer 
base,  and  the  promise  of  active 

RFID  and  sensor  technologies. 


What  are  you  cleaning  up  now?  We’re 
making  a  lot  of  infrastructure  invest¬ 
ments.  The  data  center  and  network 
infrastructure  build-out  is  where  a  lot 
of  our  focus  is  right  now. 

What  new  projects  made  the  cut  for  the 
next  12  months?  The  focus  tends  to  be 
around  international,  ease  of  use  and 
customs  clearance.  We're  making  a  lot 
of  investments  in  the  customer  service 
[and  interactive  voice  response]  plat¬ 
forms  around  the  world  [and]  in  our  mo¬ 
bile  infrastructure.  With  FedEx  Mobile. 
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■  THE  GRILL  ROB  CARTER 


Some  customers  run  on  very  old  desktop  in  it  Once  that  package  arrives  at  its  des- 
machines  with  a  dial-up  connection.  A  tination,  it’s  fine  if  light  [hits  the  sensor), 

big  part  of  the  challenge  for  us  is  making  But  if  light  [had  hit  the  sensor]  prior  to 


MThe  challenge 
we  face  isn’t 
one  technology 
being  bad  versus  others 
being  good,  it’s  about  the 
composite  complexity 
that  s  been  created  with 
generation  after  generation 
of  technology. 


high-performance  experience  for  people 
with  new  technologies,  new  handheld 
devices  and  broadband  capabilities. 

It’s  running  that  gamut  that's  the  most 
challenging  limiter.  We  don’t  just  get  to 
move  along  the  current  edge  of  technol¬ 
ogy;  we  have  to  make  sure  we  move 
along  the  tailing  edge  as  well,  or  we  will 
alienate  a  lot  of  customers. 

What  emerging  technologies  do  you  find 
most  promising  for  your  organization  and 
why?  The  next  generation  of  sensors 
and  active  RFID  devices  is  going  to 
really  revolutionize  the  Internet  and 
what  is  possible. 

The  connected  Web  has  changed  the 
way  the  world  works  and  has  been  in¬ 
credibly  powerful.  We’re  getting  ready 


embedding  sensors  in  critical  ship¬ 
ments  that  give  us  visibility  to  temper¬ 
ature.  vibration  and  all  those  kinds  of 
things.  We’re  piloting  that  with  some 
of  our  high-value  customers  today. 

That’s  just  one  example  of  how  high- 
performance,  actively  communicating 


can  think  of  all  kinds  of  applications. 

If  you  want  to  know  the  location  of  a 
high-value  shipment,  the  ability  of  GPS 


where  something  is 
itrol,  but  the  ability 
the  spur  of  the  mo- 


ff  you  could  rip  out  any  legacy  IT  infra¬ 
structure  technology  and  replace  it  with 
the  state  of  the  art,  what  would  you  scrap? 


acy  world.  If  there  were  a  wand  I  could 
wave,  I  would  try  to  eliminate  complex¬ 
ity.  The  challenge  we  face  isn’t  one  tech¬ 
nology  being  bad  versus  others  being 
good,  it’s  about  the  composite  complex¬ 
ity  that’s  been  created  with  generation 
after  generation  of  technology. 

In  addition  to  your  day  job  at  FedEx, 
you’re  also  on  several  boards  of  direc¬ 
tors.  Why?  Our  chairman  encourages 
participation  on  relevant  boards  that 


Winn  Schwartau 

What  H  Will  Take 
To  Wire  the  World 


CURRENTLY,  15%  of  the  human  race  is  wired.  It’s 
a  smallish  number,  really.  But  when  you  consider 
what  we  in  the  IT  industry  expect  of  those  who 
join  the  wired  elite,  it’s  something  of  a  miracle  that 
the  percentage  is  as  high  as  it  is. 


years  after  the  introduc¬ 
tion  of  the  PC,  we  have  not 
insisted  that  vendors  build 
resilient,  self-protecting 
devices.  And  that  lack  of 
native  security  is  going  to 
scare  off  a  large  chunk  of 
that  85%  of  the  world  that 
remains  unwired. 

The  third  rethink  would 
result  in  graceful  degrada¬ 
tion.  Systems  will  fail  — 
it’s  an  unavoidable  fact  of 
life.  Most  systems,  though, 
are  designed  with  no 
thought  given  to  that  inevi¬ 
tability.  We  need  software 
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At  MIT’s  Media  Lab 
candidate  Pranav  Mis 
Sense  project 
projector  worn  around  the  neck 

surface,  from  walls  to  the  palm  of 


ry’s  Sixth 
a  and  a  tiny 
hat  sees  what 
ion  to  any 
he  user’s  hand. 


A  mandate  for  change 
is  a  mandate  for  smart. 


The  world  is  ready  for  change-that  much  is  clear. 

For  leaders  of  all  kinds,  this  moment  presents  a  rare 
opportunity.  Our  planet  is  not  just  getting  smaller  and 
flatter.  It  is  also  becoming  smarter. 

That  is,  intelligence  is  being  infused  into  the  way  the 
world  literally  works-into  the  systems,  processes 
and  infrastructure  that  enable  physical  goods  to  be 
developed,  manufactured,  bought  and  sold.  That  allow 
services  to  be  delivered.  That  facilitate  the  movement  of 
everything  from  money  and  oil  to  water  and  electrons. 
And  that  help  billions  of  people  work  and  live.  This  means 
we  actually  have  the  potential  to  change  the  way  the 

That's  good  news,  because  the  systems  by  which  the 
world  works  today  are  increasingly  unsustainable.  They 
may  be  networked,  but  it  turns  out  that  being  connected 
isn't  enough. 

It  isn’t  enough  to  prevent  us  from  wasting  too  much 
energy.  From  spending  too  much  time  in  traffic.  From 
producing  food  too  expensively  and  wasting  too  much 
of  what  we  produce.  From  missing  too  many  sales 
opportunities  and  disappointing  too  many  customers 
because  of  inefficient  supply  chains.  From  making  too 
many  medical  errors  and  spending  too  much  to  provide 
healthcare  for  too  few.  And  most  obviously  of  late,  from 
failing  to  manage  financial  risk. 

Now,  with  computational  power  being  built  into  things 
we  wouldn't  recognize  as  computers,  any  person, 
object,  process  or  service  and  any  organization,  large 
or  small,  can  become  digitally  aware,  connected  and 
smart.  Consider  the  changes  already  under  way. 


Smart  traffic  systems  are  helping  to  reduce  gridlock 
by  20%,  cutting  pollution  and  increasing  ridership  on 
public  transit. 

Smart  food  systems  based  on  RFID  technology 
embedded  into  supply  chains  are  monitoring  the  flow 
of  meat,  poultry  and  other  items-from  the  farm  to 
the  supermarket  shelf. 

Smart  healthcare  systems  are  helping  to  lower  the 
cost  of  therapy  by  as  much  as  90%. 

Police  departments  are  correlating  street-level 
information  from  myriad  observations  and  devices  to 
identify  crime  patterns -helping  prevent  crime  rather 
than  simply  punishing  it. 

The  list  is  long  and  the  transformation  is  just  beginning. 

Its  benefits  will  be  reaped  not  only  by  large  enterprises, 
but  also  by  mid-sized  and  small  companies -the 
engines  of  economic  growth  everywhere -and  by 
individuals  and  communities  around  the  world. 

Imagine  how  a  smarter  planet  will  transform  the  ways 
we  pursue  everything  from  eoa^omic  growth  to  societal 
progress  to  environmental  sustainability  to  cures  for 
disease,  as  well  as  the  ways  we  interact  with  each  other 
and  with  the  world. 

The  opportunity  is  before  us,  and  the  moment  will  not 
last  forever.  The  question  is,  will  we  seize  it?  As  we  look 
to  stimulate  our  economy  and  rebuild  our  infrastructure, 
will  we  simply  repair  what's  broken?  Or  will  we  prepare 
for  a  smarter  future? 

Let's  build  a  smarter  planet.  Join  us  and  see  what  others 
are  thinking  at  ibm.com/change 


like  the  PC  we  know  today,"  says  Wen 
Xiao,  CIO  of  global  service  delivery  at 
London-based  telecommunications  gi¬ 
ant  BT  Group  PLC.  “It  will  be  smaller 
and  ubiquitous.  Its  function  is  less  of 
computing  and  more  of  access  control 
and  communications.  The  computing 
capabilities  will  reside  inside  the  cloud 
and  be  accessed  on  demand  by  [the] 
individual  user.” 

He  says  younger  workers,  and  cer¬ 
tainly  those  who  will  enter  the  work¬ 
force  in  the  coming  decade,  expect 
their  data  —  not  just  their  devices  —  to 
travel  with  them.  They  need  their  PCs 
to  work  wherever  they  want  them  to, 
and  they  don’t  want  to  worry  about 
storing  and  transferring  data. 

Xiao  says  virtualization  and  cloud 
computing  are  already  enabling  that 
new  level  of  mobility,  and  the  trend  is 
expected  to  accelerate.  “The  computing 
[and]  data-storage  functions  will  all 
be  virtualized  —  device-independent, 
location-independent  data  and  applica¬ 
tions  stored  somewhere  in  the  cloud, 


THE  FUTURE  OF  THE  PC  could  drasti¬ 
cally  change  what  companies  expect 
from  IT  departments,  as  the  mobility  and 
flexibility  of  computing  will  expand  where 
and  when  employees  work. 

Wen  Xiao.  CIO  of  global  service  de¬ 
livery  at  BT  Group,  is  already  thinking 
about  what  this  means  for  IT  leaders  like 
him.  “I  am  a  big  believer  in  user-owned 
computing,"  he  says.  “In  other  words, 
[the]  user  should  be  responsible  for  pro¬ 
visioning  their  own  computing  devices, 
and  the  corporate  IT  department’s  job  is 
to  create  a  secure  enterprise  cloud  and 
control  the  access  and  authentication  of 
individual  users' 

That  will  give  employees  more  choices, 
Xiao  says.  They  can  pick  whatever  PCs 
they  prefer  and  will  be  responsible  for 
the  maintenance  of  them.  The  specific 
computing  device  won't  matter  to  the 


“Well  be  virtualizing  everything,  and  if 
I  virtualize  everything,  then  investing  in 
the  device  is  the  wrong  decision.  Ill  have 
to  focus  on  the  architecture."  Xiao  says. 

He's  already  working  on  building  an 
enterprise  that  supports  user-owned 
computing,  where  workers  can  use 
flashcards  to  access  the  company's 
applications  and  data. 

With  such  changes  on  the  horizon,  Xiao 
says  the  IT  department  and  even  the  role 
of  the  CIO  will  change.  Instead  of  focus¬ 
ing  on  hardware.  CIOs  will  look  at  how 
to  best  assemble  services  that  reside  in 
the  cloud,  how  those  services  can  be  ar¬ 
ranged  to  best  fit  the  business  needs  and 
give  the  company  a  competitive  advan¬ 
tage,  and  how  they  can  be  secured. 

As  Xiao  says,  "There's  a  whole  new 
horizon  for  the  PC  of  tomorrow  and  the 
CIO  of  tomorrow." 


—  will  drive  adoption,  he  says.  I  material  itself.  The  material  would  be 


■  SECURITY 


Securing 

-Virtualized. 

Environment 


Protecting  virtualized 
resources  requires  a  mix 
of  old  and  new  security 
tactics.  By  John  Edwards 


VIRTUALIZATION 
promises  to  make 
IT  departments 
more  flexible, 
more  efficient  and 
—  perhaps  most 
crucial  in  these  tough  times 
—  more  frugal.  But  one 
advantage  the  technology 
doesn’t  provide  is  an  escape 
from  the  need  for  strong  se¬ 
curity  measures. 

As  soon  as  he  began  plan¬ 
ning  his  Novell  virtualiza¬ 
tion  project,  Noah  Broad¬ 
water  realized  that  he  was 
looking  at  an  initiative  that 
would  require  both  a  contin¬ 
uation  of  existing  security 
practices  and  an  analysis  of 
any  perils  that  might  be  cre¬ 
ated  by  the  new  technology. 

"It  was  evident  that  virtu¬ 
alization  demanded  a  close 
look,”  says  Broadwater, 
who  is  vice  president  of  in¬ 
formation  services  at  New 
York-based  children’s  media 
producer  Sesame  Workshop. 
“Above  all,  we  had  to  make 


MARCH 


sure  that  we  would  be  se¬ 
cure  on  all  fronts.” 

Neil  MacDonald,  an  ana¬ 
lyst  at  Gartner  Inc.,  says  that 
virtualization  is  opening 
new  doors  for  IT  depart¬ 
ments  as  well  as  for  people 
who  seek  to  tamper  with 
critical  data  and  services. 

"Adopters  can  expect  that 
virtualized  software,  like 
hypervisor  software,  will 
be  attack  targets,”  he  says. 
"Therefore,  virtualization 
security  planning  should 
be  addressed  at  a  project’s 
inception." 

CRASH  AND  LEARN 

With  IT  departments  in 
today’s  crashing  economy 
being  asked  to  do  more  with 
less,  virtualization’s  lure 
is  becoming  increasingly 
irresistible.  But  as  some 
departments  rush  headlong 
toward  the  technology  in  an 
effort  the  stretch  scarce  dol¬ 
lars,  the  temptation  arises  to 
skimp  on  security. 


Many  thrifty  managers 
believe  that  the  same  tech¬ 
nologies  currently  used  to 
protect  conventional  physi¬ 
cal  servers  can  simply  be 
extended  to  virtualized  en¬ 
vironments.  But  MacDonald 
says  that’s  a  potentially 
calamitous  assumption.  He 
notes  that  the  unwary  could 
be  trapped  by  threats  in 
several  areas,  including  soft¬ 
ware,  administration,  mo¬ 
bility,  the  operating  system 
and  network  visibility  (see 
“Virtualization’s  Soft  Spots,” 
page  27).  “There  need  to  be 
policies  to  address  these  is¬ 
sues,"  he  adds. 

Broadwater  takes  some 
common-sense  defensive 
steps,  such  as  using  fire¬ 
wall  controls  to  limit  user 
access  and  running  a  full 
array  of  security  protocols 
and  checks  on  each  virtual 
server.  In  addition,  Broad¬ 
water  says  he  depends  on 
his  virtualization  software 
vendor,  Novell  Inc.,  to  sup¬ 
ply  a  product  that’s  resistant 
to  intrusions  and  attacks. 

He  says  he  worries  about 
“holes  in  the  virtualization 
software  itself  —  kernel  at¬ 
tacks,  someone  attacking 
the  host  module  or  one  of 
my  guys  making  a  mistake 
against  the  host  server 
—  and  then  making  sure 
that  the  full  virtualization 
software  is  actually  secure 
and  is  patched.” 

Broadwater  says  he’s 
confident  that  his  vendor  is 
keeping  pace  with  virtual¬ 
ization  threats  as  they  arise. 

He  feels  that  beyond 
technology-driven  mea¬ 
sures,  it’s  helpful  for  enter¬ 
prises  to  keep  details  about 
virtual  environments  close 
to  their  vests  in  order  to  de¬ 
ter  unwanted  attention.  “In 
a  lot  of  cases,  we  don’t  even 
tell  people  that  they're  run¬ 
ning  on  a  virtual  box  or  that 
they’re  actually  accessing  a 
virtual  box,"  Broadwater  says. 


Oyvind  Kaldestad,  vice 
president  of  corporate  IT 
at  Lionbridge  Technologies 
Inc.,  a  business  outsourc¬ 
ing  and  training  company 
in  Waltham,  Mass.,  says 
his  top  concern  is  malware 
infections  finding  their  way 
into  his  client  enterprises' 
Microsoft-based  virtual 


“I  would  be  really  worried 
about  having  a  host  or  par¬ 
ent  partition  being  able  to 
access  and  cause  a  virus  or 
other  type  of  infection  on  a 
child  partition  —  that  would 
be  a  bad  scenario,”  he  says. 

Kaldestad  is  also  con¬ 
cerned  about  child  parti¬ 
tions  using  virtualization 
to  talk  to  one  another  and 
spread  infections.  But  like 
Broadwater,  he’s  confident 


TERMS 

DEFINED 

Hypervisor  This  vtrtu- 


Parsnt  partition/child 
partition:  In  a  Microsoft 
virtualization  environ¬ 
ment  the  parent  partition 
creates  and  manages  the 
child  partitions  on  which 
users  create  virtual  ma¬ 
chines  and  Install  guest 
operating  systems. 

Slave  DNS  server 
In  virtual  Web  hosting, 
a  slave  domain  name 
server  functions  as  a 
backup  to  the  primary 
DNS  server. 


signing  our  virtual  environ¬ 
ment  any  differently  from 
our  physical  environment. 
That  was  a  mistake,  and 
we’ve  learned  from  that.” 

Like  many  others  manag¬ 
ing  a  virtualized  environ¬ 
ment,  Milligan  would  like 
vendors  to  provide  more 
and  better  visibility  tools. 

“It's  that  unknown  —  not 
knowing  what’s  going  on  in 
your  virtual  environment,” 
he  says.  “Not  just  what’s 
communicating  with  your 
servers  from  the  outside,  but 
what’s  going  on  internally 
between  those  virtual  serv¬ 
ers  and  desktops.” 

Although  safeguarding 
virtualized  environments 
requires  new  insights  and 
practices,  conventional  se¬ 
curity  still  plays  a  role.  Like 
many  experienced  adopters, 
Broadwater  says  that  virtu¬ 
alization  security  begins  at 

“It’s  general  security 
stuff,”  he  says.  “Make  sure 


VIRTUALIZATION’S 
SOFT  SPOTS 


such  as  hypervisors,  which 
represent  a  new  layer  of 
privileged  software  that 
could  be  attacked  and  must 


■  Loss  of  separation  of  du- 


ments  without  vendor  help. 

■  Limited  visibility  into 
the  host  operating  system 
and  virtual  network  to  find 
vulnerabilities  and  assess 

■  A  restricted  view  into 
j  traffic  among  VMs  for 

;  inspection  by  intrusion- 
prevention  systems. 

■  Mobility.  Mobile  VMs  will 
;  require  security  policies  and 
;  settings  to  mitigate  risk. 


DNS  and  utility  servers. 

Yet  Scott  Crawford, 
security  and  risk  manage¬ 
ment  research  director  at 
Enterprise  Management  As¬ 
sociates  Inc,  a  technology 
research  firm  in  Boulder. 
Colo,  warns  that  it’s  still 
important  not  to  be  lulled 
into  a  false  sense  of  security, 
since  no  enterprise  wants 
to  invite  an  attack  or  intru¬ 
sion,  even  if  the  tasks  being 
virtualized  are  relatively 
minor.  "Nobody  wants  to  be 
a  victim  and  to  have  to  clean 
up  a  mess,"  he  says. 

Milligan  agrees.  “Virtu¬ 
alization  is  a  very  exciting 
technology  that  offers  IT 
managers  a  better  way  to 
manage  some  of  their  sys¬ 
tems,”  he  says.  “But  don’t  get 
too  excited  over  the  benefits 
and  look  past  the  security. 
That  could  be  dangerous.”  ■ 
Edwards  is  a  freelance 
writer  in  Gilbert,  Ariz. 
Contact  him  at  jedwards@ 


MILLIONS  cused  on  providing  primary 
of  people  health  care  to  rural  corn- 
live  in  pov-  munities  before  launching 
erty  in  the  other  initiatives  designed  to 
vast  rural  improve  the  lives  of  impov- 

regions  of  India's  Andhra  erished  villagers. 

Pradesh  state.  The  country’s  Although  these  programs 
tech  revolution  and  subse-  have  reached  many  —  to 
quent  economic  boom  ap-  date,  they’ve  helped  more 
parently  passed  them  over.  than  3  million  people  in 
But  the  Byrraju  Founda-  nearly  200  villages  —  the 
tion  had  faith  in  technology  Byrraju  Foundation  saw 
and  its  ability  to  transform  opportunities  to  do  more, 
lives,  even  in  the  remote  particularly  when  it  came 
reaches  of  India.  to  providing  critical  health 

The  foundation  aims  to  care  services, 

help  build  self-reliant  rural  The  foundation  already 


Heart 

Heart 


Innovative  software  brings 
diagnostic  cardiac  care  to 
remote  villages  in  India. 

By  Mary  K. 


communities  by  providing 
a  variety  of  comprehensive 
services,  including  health 
care,  education,  environ¬ 
mental  programs  and  the 
delivery  of  clean  water.  And 
its  work  harnesses  IT  to  de¬ 
liver  increasingly  complex 
services,  such  as  virtual 
medical  consultations  and, 
now,  virtual  electrocardio¬ 
grams  and  cardiac  diagno- 

“There  was  a  crying 
need  that  wasn’t  being  met 
at  the  village  level.  But  we 
realized  if  we  could  not  get 
the  patient  and  the  doctor 


had  doctors  and  nurses 
working  in  the  villages,  but 
Jacob  says  many  villagers 
required  specialized  care 


We  realized 
if  we  could 
not  get  the  patient 
and  the  doctor 
together  in  the  vil¬ 
lage,  we  could  take 
the  patient  virtu¬ 
ally  to  a  doctor  in 
the  city. 
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The  Byrraju 
Foundation 

HYDERABAD,  INDIA 


The  Byrraju  Foundation  was 
established  in  2001  in  memory 
of  the  late  Byrraju  Satyana- 
rayanaRaju.  founder  ot  the 
Satyam  group  of  companies.  If 
is  a  nonprofit  organization  that 
provides  a  range  of  services 
to  help  communities  in  rural 
India  become  self-reliant.  The 
foundation  has  helped  more  than 
3  million  people  in  185  villages  in 
the  state  of  Andhra  Pradesh.  It 
has  1.200  employees  and  11.000 
volunteers,  90%  of  whom  live 
in  the  villages.  It  spends  more 
than  $8  million  (U.S.)  on  projects 
annually:  of  that  total.  $3  million 
comes  from  trustees,  and  the  rest 


PROJECT  CHAMPIONS: 

Joseph  Thomas,  who  leads  IT 
at  the  foundation:  Or.  Srinivas 
K.  Iyengar,  lead  partner  and 
integrator  for  the  foundation's 
health  module;  and  IT  project 
lead  B.  Swami  Nathan  of  Satyam 
Computer  Services  Ltd. 


IT  EMPLOYEES:  The  founda¬ 
tion  employs  about  a  dozen  IT 
workers  and  uses  Satyam  con¬ 
sultants  for  additional  support. 


ROI:  The  foundation  doesn't 
look  at  dollar  returns.  Its  real  ROI 
comes  from  providing  medical 
services  to  patients  who  would 
otherwise  have  difficulty  access¬ 
ing  such  care  because  of  geo¬ 
graphical  and  financial  barriers. 


that  they  could  i 
in  distant  cities. 

More  specifically,  many 
villagers  needed  cardiac 
care.  A  significant  number 
of  them  had  diabetes,  hyper¬ 
tension  and  other  heart- 
related  conditions,  and  they 
had  to  travel  hundreds  of 
miles  to  urban  hospitals  for 
EKGs  and  foliow-up  consul- 


officials  believed  that  villag¬ 
ers  needed  more  than  vir¬ 
tual  consultations.  To  meet 
that  need,  the  foundation 
expanded  its  telemedicine 
program  in  2007  beyond 
consultations  to  diagnostics 
aswelL 

Today,  the  foundation 
has  the  capacity  to  per¬ 
form  EKGs  on  villagers  in 


patient  —  all  at  a  fraction  of 
the  time  and  money  it  would 
take  to  provide  the  same 
services  face  to  face. 

Nurses  in  the  villages 
connect  probes  from  a  com¬ 
puter  to  a  patient  to  perform 
the  EKG.  When  the  test 
is  completed,  a  Tele-EKG 
application,  developed  by 
Satyam  Computer  Services 
Ltd.  and  SN  Informatics 
Pvt,  sends  the  results  to 
Narayana  Hrudayalaya,  a 
Bangalore  hospital  special¬ 
izing  in  cardiac  treatment. 
Within  15  minutes,  a  car¬ 
diologist  provides  analysis 


treatment  or  follow-up  care. 

Approximately  5,000 
people  have  already  under¬ 
gone  these  virtual  tests  and 
consultations,  Jacob  says. 

Villagers  are  pleased  to 
have  this  service  available 
to  them,  says  Dr.  K.  Sivaji, 
a  medical  officer  at  the 
Byrraju  Foundation.  They 
recognize  the  importance  of 
having  easy  access  to  poten¬ 
tially  life-saving  EKGs,  and 
Sivaji  says  he  believes  such 
services  should  be  part  of 
every  health  center  that  the 
foundation  establishes. 

The  foundation’s  success 


[Because 
of  the  cost 
of  travel],  unless 
it  was  absolutely 


ponea  going  to 
the  doctor. 


“The  initial  good  re¬ 
sponse  to  the  telemedicine 
work  has  resulted  in  further 
piloting  of  a  more  scalable 
model  making  use  of  data 
cards  on  mobile  platforms,” 
says  John  Borgoyary,  pro¬ 
gram  officer  at  the  New 
Delhi-based  poverty  unit  of 
the  United  Nations  Develop¬ 
ment  Programme.  UNDP 
India  has  helped  finance 
two  of  the  foundation's  in¬ 
formation  and  communica¬ 
tions  technology  projects 
for  development. 


TAKING  THE  NEXTSTEP 

The  Byrraju  Foundation 
already  had  a  strong  base 
from  which  to  build  when 
it  started  its  EKG  initiative. 


■  COMPUTERWORLD  HONORS 


city  doctors,  the  founda¬ 
tion  needed  hardware  and 
software  that  was  reliable, 
functional  and  user-friendly, 
says  Joseph  Thomas,  who 
leads  IT  at  the  Byrraju 
Foundation. 

The  foundation  opted 
for  a  Satyam  application 
that  provides  real-time 
collaboration  through  IP- 
based  videoconferencing. 
The  point-to-multipoint 
videoconferencing  system 
is  installed  in  more  than 
30  villages.  According  to 
foundation  officials,  this 
software  is  less  expensive 
and  more  flexible  than 
older.hardware-based  video- 
conferencing. 

The  system  works  on  a 
broadband  wireless  network 
based  on  802.Ub/g  tech¬ 
nology,  Thomas  says.  The 
foundation  built  it  with  Me¬ 
dia  Lab  Asia. 

Thomas  says  the  founda¬ 
tion’s  IT  staff,  along  with  Sa¬ 
tyam  consultants,  developed 
the  software  to  make  all  the 
pieces  work  together. 


hospital  provided  its  servic¬ 
es  gratis,  the  hardware  and 
software  enabled  interpreta¬ 
tion  of  patients'  EKGs  from 
remote  locations,  using  the 
Internet  as  the  key  enabler,” 
Nathan  says. 

LAST-MILE  OBSTACLES 

But,  as  with  most  technol¬ 
ogy  implementations,  the 
foundation  faced  challenges 
in  delivering  its  virtual 
medical  system,  Jacob  says. 
And  it  still  faces  challenges 
maintaining  it. 


bandwidth,  Jacob  says. 

Despite  these  obstacles, 
the  foundation  remains 
committed  to  implementing 
EKG  services  at  as  many  ru¬ 
ral  health  centers  as  it  can. 
As  of  the  fall,  the  foundation 
offered  those  services  in  46 
centers,  with  most  using 
broadband  and  others  us¬ 
ing  Indian  Space  Research 
Organization  satellite  con- 

Jacob  says  he  expects  that 
80  health  centers  will  soon 
offer  telemedicine  services, 
including  EKG  diagnostics. 


EKG  offering.  Thomas  says 
the  new  diagnostic  kits  will 
be  able  run  on  renewable 
energy  and  backup  batter¬ 
ies  in  case  the  health  clinics 
lose  power. 

Setting  up  the  IT  in¬ 
frastructure  and  Schiller 
EKG  equipment  costs  ap¬ 
proximately  $6,000  (U.S.) 
per  health  care  center,  with 
most  costs  going  toward 
hardware  and  connectivity, 
Jacob  says. 

The  foundation  doesn’t 
invest  in  technology  for 
financial  gain,  of  course. 
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I  SECURITY  MANAGER’S  JOURNAL  J.F.  RICE 

Layoffs  Put  Security 
On  the  Back  Burner 

Nearly  half  of  the  security  staff  is  being 
laid  off.  Will  a  bare-bones  team  be  able 

to  protect  the  company’s  assets? 


The  worst 

has  happened. 
I  have  to  cut 
almost  half  of 
my  informa¬ 
tion  security  staff  because, 
in  this  economy,  the  com¬ 
pany  is  losing  money  faster 
than  anybody  anticipated. 
The  cuts  will  include  over 
a  third  of  our  global  IT 
department,  and  even  that 
may  not  be  enough.  We 
may  need  another  round 
of  layoffs  if  things  don’t  get 
better  soon. 

This  is  going  to  have 
a  devastating  impact  on 
our  ability  to  provide  ser¬ 
vices  to  the  company  and 
protect  its  assets.  With  a 
bare-bones  staff,  our  IT 
department  won't  be  able 
to  roll  out  any  new  capa¬ 
bilities;  all  resources  will 
be  focused  on  keeping  our 
technological  lights  on.  It’s 
amazing  how  fast  things 
are  falling  apart.  At  this 
rate,  I’ll  be  lucky  if  there’s 
a  company  to  protect  by 
the  end  of  this  year. 

It’s  demoralizing.  De¬ 
spite  my  best  efforts.  I 
wasn’t  able  to  protect  my 
staff,  and  now  we’re  at  risk 
of  losing  ground  on  every¬ 
thing  we’ve  accomplished. 
We  spent  all  of  last  year 


establishing  our  fledgling 
information-security  pro¬ 
gram.  Things  were  starting 
to  look  up,  but  we  can  say 
goodbye  to  all  that  for  now. 

For  example,  we  fought 
an  uphill  battle  to  get  our 
IT  organization  onboard 
with  patching  our  servers, 
and  we  were  just  starting 
to  see  some  improvement. 
Previously,  our  servers  were 
not  being  patched  at  all. 
They  were  just  being  built, 
deployed  and  forgotten. 

Today,  about  20%  of  our 
servers  are  being  regu¬ 
larly  patched.  They  were 
the  lowest-hanging  fruit 
—  noncritical  servers  that 
were  low  risk.  We  were 
just  starting  to  address 
the  other  80%  of  our  serv¬ 
ers,  but  now  I  have  grave 
doubts  that  they  will  be 
on  a  regular  patch  cycle 
anytime  soon.  It’s  even 
possible  that  we’ll  be  un¬ 
able  to  maintain  the  patch- 

■  It’s  demoral¬ 
izing.  Despite 
my  best  efforts, 

I  wasn’t  able  to 
protect  my  staff, 
and  now  we  risk 
losing  ground. 


ing  routine  we  fought  so 
hard  for. 

Given  the  gravity  of  our 
situation,  we  also  won’t 
be  able  to  keep  our  out¬ 
sourced  third-party  ser¬ 
vices.  And  my  decimated 
staff,  already  a  skeleton 
crew  before  the  layoffs  hit, 
isn’t  going  to  be  able  to 
pick  up  the  slack.  In  effect, 
we  simply  won’t  be  able  to 
do  much  of  anything  that 
an  information  security 
department  needs  to  do. 
Day-to-day  operations 
are  going  to  suffer,  and  1 
certainly  don’t  know  how 
we’ll  be  able  to  find  the 
time  to  design  security 
for  new  projects.  Oh  well, 
that’s  something  I  prob¬ 
ably  shouldn't  worry  about 
too  much,  since  chances 
are  slim  that  there  will  be 
many  of  those  this  year. 
After  taking  one  long, 
challenging  step  forward, 
we’re  taking  two  big,  fast 
steps  backward. 

TOO  MANY  REORETS 

I  wrote  in  an  earlier  in¬ 
stallment  of  this  column 
about  our  budget  not  in¬ 
cluding  funds  for  disaster 
recovery  for  new  applica¬ 
tions.  I  complained  might¬ 
ily  at  the  time,  but  that 
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now  seems  like  one  of  my 
lesser  worries.  Again,  how 
many  applications  will  our 
overtaxed  IT  department 
be  rolling  out  this  year? 

But  this  situation  car¬ 
ries  other  regrets  for  me. 
Prevention  of  data  leak¬ 
age,  which  is  something 
this  company  desperately 
needs,  will  have  to  go  on 
the  back  burner  because 
we  can’t  afford  to  work  on 
something  like  that  right 
now.  Third-party  security 
audits  are  out  the  window, 
as  are  any  other  new  ca¬ 
pabilities  that  have  a  price 
tag  attached  to  them. 

Worst  of  all,  of  course,  is 
dismantling  my  top-notch 
security  team,  which  I 
painstakingly  built  up  over 
the  past  18  months  and 
staffed  with  great  people. 

Some  will  stay,  but  many 
must  go.  It's  one  of  the 
most  painful  decisions  a 
manager  has  to  make. 

I've  been  ______ 

through  this  sort  Hihbiiihmi 
of  thing  before,  9  JOIN  IN 
but  that  doesn’t 
make  it  any  ,  computarworid. 

easier.  In  fact,  it 

much  last  time  that  I  swore 
off  management  for  sever¬ 
al  years.  This  is  a  situation 
I  wouldn’t  wish  on  anyone. 
Let’s  hope  things  get  better 
before  they  get  worse.  ■ 

This  week’s  journal  is 
written  by  a  real  security 
manager,  “J.F.  Rica,"  whose 
name  and  employer  have 
been  disguised  for  obvious 
reasons.  Contact  him  at 
jf.rice@engineer.com. 


Preston 


Google:  The  Next 
Evil  Empire? 

A 


MONG  MANY  of  the  tech  cognoscenti,  Microsoft 
has  been  portrayed  much  like  the  evil  Galactic  Em¬ 
pire  in  Star  Wars:  a  tyrannical  regime  bent  on  con¬ 
quering  the  universe  for  its  own  nefarious  ends. 


Google,  on  the  other 
hand,  has  been  seen  as 
having  the  spirit  of  a 
can-do  band  of  rebels, 
relying  on  its  guile  and 
innate  goodness  to  fight 
the  evil  empire. 

My,  how  times  have 
changed. 

Today,  Google  re¬ 
sembles  no  company  so 
much  as  it  does  Microsoft 
in  its  global  ambitions,  its 
clear-eyed  focus  on  the 
bottom  line  and  —  for 
the  first  time  —  a  host 
of  critics  who  fear  that 
the  company’s  reach  has 
grown  too  long,  its  grip 
on  the  market  too  strong. 

In  fact,  fears  about 
Google’s  market  power 
have  grown  so  mark¬ 
edly  that  sometime  in  the 
next  four  years,  you  may 
well  see  an  antitrust  suit 
launched  against  Google 
by  the  U.S.  Department 
of  Justice  to  rein  in  the 
power  of  the  Silicon  Val¬ 
ley  search  king. 

To  understand  why 
Google  may  be  the  target 
of  an  antitrust  suit,  lis¬ 
ten  to  Christine  Varney, 


nominated  by  President 
Barack  Obama  to  be  as¬ 
sistant  attorney  general 
for  antitrust  at  the  Justice 
Department  —  in  other 
words,  the  nation’s  next 
antitrust  czar. 

On  June  19, 2008,  well 
before  the  election,  Var¬ 
ney  participated  in  a  panel 
discussion  sponsored  by 
the  American  Antitrust 
Institute.  According  to  the 
Bloomberg  news  service, 
she  warned  that  Google, 
not  Microsoft,  presents 
the  greatest  antitrust  dan¬ 
ger  in  the  21st  century. 

“For  me,  Microsoft 
is  so  last  century.  They 
are  not  the  problem,” 
she  said,  adding  that  our 
economy  will  “continu¬ 
ally  see  a  problem  —  po¬ 
tentially  with  Google,” 
because  it  “has  acquired 
a  monopoly  in  Internet 
online  advertising.” 

Varney  warned  that 


■  Today,  Google 
resembles  no  com¬ 
pany  so  much  as  it 
does  Microsoft. 


Google  may  present 
other  dangers  as  well, 
particularly  in  cloud 
computing.  The  company 
is  “quickly  gathering 
market  power  in  what 
I  would  call  an  online 
computing  environment 
in  the  clouds,”  she  said. 

Lest  anyone  miss  her 
point  about  Google,  Var¬ 
ney  added,  "When  all  our 
enterprises  move  to  com¬ 
puting  in  the  clouds  and 
there  is  a  single  firm  that 
is  offering  a  comprehen¬ 
sive  solution,  you  are  go¬ 
ing  to  see  the  same  repeat 
of  Microsoft.” 

To  drive  home  her 
point,  she  said  that  in  the 
same  way  that  compa¬ 
nies  complained  about 
Microsoft’s  domination 
in  the  days  before  the 
antitrust  suit  against  it, 
“there  will  be  companies 
that  will  begin  to  allege 
that  Google  is  discrimi¬ 
nating”  against  them  by 
“not  allowing  their  prod¬ 
ucts  to  interoperate  with 
Google’s  products.” 

This  is  not  idle  talk. 
Varney  has  long  experi¬ 


ence  with  antitrust  suits 
and  technology.  In  fact, 
she  was  a  lobbyist  for 
Netscape  and  pushed 
President  Clinton’s  Jus¬ 
tice  Department  to  sue 
Microsoft  for  violations 
of  antitrust  laws. 

Before  that,  she  had 
been  a  member  of  the 
Federal  Trade  Com¬ 
mission  under  Clinton. 
While  there,  she  was  a 
vocal  proponent  of  online 
privacy,  calling  for  indus¬ 
try  privacy  standards  and 
for  the  government  to  in¬ 
crease  its  enforcement  of 
privacy  laws.  Given  that 
many  people  fear  that 
Google  has  amassed  far 
too  much  private  infor¬ 
mation  about  Internet  us¬ 
ers,  this  isn’t  good  news 
for  the  company. 

There’s  no  guaran¬ 
tee  that  there  will  be  a 
Google  antitrust  suit,  of 
course.  Varney  made  her 
statements  before  she 
was  nominated  to  be  the 
country’s  antitrust  chief. 
She  may  well  change  her 
mind  once  she  starts  her 
new  job. 

On  the  other  hand,  if  I 
were  a  Google  executive, 
there’s  one  place  where 
I’d  be  hiring  instead  of 
cutting  back:  the  legal 
department.  ■ 

Preston  Gralla  is  a  contrib¬ 
uting  editor  to  Computer- 
worid.com  and  the  author 
of  more  than  35  books,  in¬ 
cluding  How  the  Internet 
Works  (Que,  2006). 


QUESTIONING 


identified  the  following  questions  as  among  the  most 
annoying  they  are  asked  during  job  interviews: 

■  “What  are  your  worst  traits?” 

■  “What  would  you  say  is  your  worst  quality?” 

■  “What's  the  biggest  mistake  you’ve  ever  made?” 

■  “What  are  your  flaws  and  failings?” 

■  ‘What  irritates  you  about  co-workers?” 


in  your  specific  eiperience  benefit  us?” 


Business  Meets 
Academia 


m  IT  advisory  cornel?  The 

SBMPS  has  an  advisoiy  council  that 
addresses  all  of  its  programs,  indud- 


program  and  the  MBA  in  technology 
arfeinnovaiion  leadership.  The  ad- 
visocy  cound  which  is  made  up  of 


ness  leaders  such  as  Richard  "Dick" 
Motley  of  R.  Motley  lnc.and  Robert 
6ood  of  Good  Leads. 

Says  NeS  Parmenter,  SBMPS 


ies  looks  to  these  innovative,  well- 
informed  leaders  for  new  program 
directions,  modifications  to  our  exist- 


ness  needs,  and  to  help  us  to  provide 
the  most  valuable  and  relevant  edu¬ 
cation  possible  to  our  students." 


has  helped  develop  the  curric¬ 
ulum?  The  MBA  in  technology  and 
innovation  leadership  promises  to 
be  one  of  the  school's  flagship  MBA 
offerings,  Parmenter  says,  since  it 
addresses  unfulfilled  needs  in  today's 


came  about  with  input  from  members 
of  the  school's  advisory  council. 

The  curriculum  will  include  a  core 
of  proven  management  courses, 
plus  five  new  offerings:  economics 
of  technological  change,  e-business 
and  entrepreneurship,  techno- 
logical  innovation  management  and 
strategies,  new  product  design  and 
development,  and  advanced  human 


The  advisory  council  and  an 
SBMPS  task  force  have  made  a 
number  of  recommendations  for 
both  the  undergraduate  MIS  degree 
program  and  the  new  MBA  pro¬ 
gram.  Offerings  that  have  resulted 
or  are  currently  being  implemented 
include  project  management,  social 
networking  and  strategic  manage¬ 
ment  of  technological  innovations. 

"In  addition,"  says  Parmenter.  "as 
we  develop  new  programs  such  as  an 
MBA  in  health  information  manage¬ 
ment,  we  expect  the  board  win  con¬ 
tinue  to  play  a  very  important  role." 


which  the  advisory  council 
monitors  ths  curriculum  to  en¬ 
sure  that  It's  currant  and  rai- 
evant?  The  SBMPS  is  developing  a  ' 
review  process  for  all  programs  and 
couises  within  the  programs.  "Given 
that  our  advisory  board  is  significantly 
made  up  of  industry/business  lead¬ 
ers,  as  wen  as  entrepreneurs  and 
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Co-Branded 

EMAIL 

BLASTS 


Reach  your  target  audience 
of  professional  IT  job  seek¬ 
ers  with  Computerworld’s 
Co-Branded  Email  Blasts. 
This  unique  program  allows 
you  to  choose  your  criteria 
of  1 00%  opt-in  subscribers 
by  geography,  company 
size,  job  title  and  industry. 
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ATTENTION... 

Law  Firms 
IT  Consultants 
Staffing  Agencies 


Are  you  frequently 
placing  legal  or 
immigration  advertisements? 

Let  us  help  you  put 
together  a  cost-effective 
program  that  will  make  this 
time-consuming  task  a 
little  easier! 


Place  your 

Labor  Certification  Ads  here! 


SharkBnk 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Straight  to  the  Point 

This  pilot  fish's  new  respon¬ 
sibilities  include  editing  Visio 
hies  that  come  from  clients 
and  colleagues.  Problem:  Pish 
has  an  older  version  of  Visio. 
so  he's  constantly  going  to 
co-workers  to  convert  hies. 
Solution:  Upgrade  fish's  Visio 
-  a  plan  that  fish's  manager 
promptly  approves.  But  a 
bean  counter  in  the  control¬ 
ler's  office  balks.  "Bean 
counter  said  he  just  checked 
it  out,  and  there's  a  free  Visio 
viewer  on  the  Microsoft  site," 
says  fish.  “He  wanted  to  know 
if  I  could  use  the  free  viewer 
along  with  my  old  program 
to  do  what  I  needed  and  thus 
avoid  buying  a  newer  ver¬ 
sion."  Fish's  reply:  “Can  you 
please  help  me  understand 


how  I  can  implement  your 
idea  of  editing  hies  using  a 
viewer?"  Reports  hsh,  "I  got 
permission  to  go  ahead  and 

That  Would  Explain  H 

It's  a  few  years  ago.  and  this 
pilot  hsh  works  at  a  company 
that  prints  mortgage  docu¬ 
ments  for  home  loans.  “I  and 
another  fellow  worked  the 
graveyard  shift,"  hsh  says, 
"inserting  the  documents 
into  daisy-wheel  printers, 
confirming  that  they  printed 
correctly  and  bundling  up  the 
completed  loan  packages  lor 
delivery.  We  occasionally  had 
to  call  for  assistance  from  the 
programmers,  waking  them 
up  in  the  middle  of  the  night, 
and  they'd  walk  us  through 


various  restarts,  uploads  and 
other  highly  technical  -  to  us 
-  procedures.  One  evening, 

I  called  the  programmer  on 
call,  who  gave  me  a  proce¬ 
dure  to  do  at  the  server.  There 
was  no  phone  in  the  server 
room,  so  I  had  to  write  down 
the  directions,  hang  up  and 
spend  the  next  half  hour  try¬ 
ing  to  follow  the  directions. 
After  failing  for  the  last  time, 

I  called  the  programmer  back 
and  told  him  that  this  proce¬ 
dure  wasn't  working.  The  pro¬ 
grammer  said  to  me,  ‘Yeah, 

I  know.  After  I  hung  up  with 
you,  I  realized  that  wasn't 
what  you  needed  to  do . . .' " 

Pick  One 

Pilot  hsh  at  a  medical  claims 
clearinghouse  is  asked  to 
research  why  a  new  client 
isn't  getting  reports  back.  “I 
looked  into  it  and  found  out 
that  their  claims  had  never 
been  loaded  into  our  system 
because  they  could  not  gener¬ 
ate  valid  claims  electroni¬ 
cally,"  says  hsh.  “Because  of 


this,  we  would  not  generate 
reports."  Fortunately,  there’s 
someone  who's  specifically 
responsible  for  informing  IT 
about  any  new  clients  hav¬ 
ing  these  kinds  of  problems. 
And  who  is  that?  “Exactly  the 
same  person  who  requested 
that  I  look  into  why  the  client 
was  not  getting  the  reports," 
grumbles  hsh.  "So  -  two 
methods  to  find  out  what  is 
happening:  Open  a  help  desk 
ticket  and  make  three  people 
spend  over  an  hour  research¬ 
ing  the  claims  flow  or  look  at 
the  e-mail  that  he  created." 


•Bf*  ABM 


Debbie  Winders  (508)  82 

Circulation  Manager 


Vice  President.  Marketing 

Matt  Duffy 
(508)620-8145 


Sreoo  Ptnsky 
[508)271-8013 

Executive  Vica  Prosidant/COO 


■  METRO  NEW  YORK 

■  EASTERN  CENTRAL 
STarf.S.  INDIANA 
Program  Sales  Director 

;  Hal  Mentlik  (201)  634-2324 

Senior  Sales  Associate. 
Program  Sales 

:  John  Radzniak  (201)  634-2323 


(508)620-7705 

Senior  Director.  Event 

Management  Michael  Meleedy 

(508)820-8529 

Senior  Director.  Executive 

Programs  Sandy  Weill 

(508)620-7758 


ONLINE  ADVERTISJNO 

Vice  Prosident/Oroup  Associate 

Publisher  Sean  Weglage  (415)  978-3 


James  Kalbach 
(610)971-1588 
Jennell  Hicks 
(415)978-3309 
Fax  (415)  543-8010 
Online  Sales  Managers 
Matthew  Winfringham 


■  SOUTHEASTERN  STATES 
Program  Sales  Director 

Lisa  Ladle-Wallace  (904)  284-4972 


Director  of  Market  Intollige 

Paul  Calento  (415)  978-3212 

Mailing  Address 

501  Second  Street.  Suite  114 


IDS  List  Services.  P.O.Box  9151 
Framingham.  MA  01701-9151 
Fax  (508)  370-0020 


I  FRANKLY  SPEAKING 


rank 


No  Infinite  Beer 


TF  IT  SOUNDS  too  good  to  be  true,  it  probably  is  — 
especially  if  there’s  money  involved.  So  it  should  be 
no  surprise  that  last  week,  a  99-cent  iPhone  application 
that  promised  “infinite”  free  text  messaging  stopped 
working.  It  turns  out  that  texting  was  infinitely  free  only 
because  Google  was  paying  the  bill. 

And  Google  wasn’t  getting  any  money  from  the  deal. 


Not  from  users.  Not 
from  advertisers,  who 
provide  most  of  Google’s 
revenue.  Not  even  from 
sales  of  the  app,  called 
Infinite  SMS,  which  was 
developed  by  two  guys 
in  the  Seattle  area  calling 
themselves  Inner  Fence. 

Here’s  what  happened. 
In  December,  Google  an¬ 
nounced  an  experimental 
feature:  the  ability  to 
send  and  receive  SMS 
text  messages  for  free 
through  a  Gmail  client. 
Google  even  used  stan¬ 
dard  interfaces  so  other 
software  makers  could 
create  their  own  clients 
to  use  the  service. 

In  February,  Inner 
Fence  launched  its  Infi¬ 
nite  SMS  app  through  the 
iUines  store.  The  idea 
was  pretty  simple:  A  user 
provides  the  log-in  infor¬ 
mation  for  a  Gmail  ac¬ 
count,  Infinite  SMS  logs 
into  Gmail  and  provides 
an  interface  for  texting, 
and  the  user  doesn’t  have 
to  pay  a  stiff  bill  for  send¬ 


ing  text  messages. 

Infinite  SMS  quickly 
became  very  popular. 
Google  noticed  —  prob¬ 
ably  the  first  time  it  got 
an  SMS  bill  after  Infinite 
SMS  went  on  sale. 

On  March  9  —  25 
days  after  Inner  Fence 
launched  its  Google  killer 
—  Google  informed  the 
company  that  it  would  be 
turning  off  the  free  SMS 
service  for  non-Google 
apps.  Two  days  later. 
Infinite  SMS  stopped 
working.  (The  free  SMS 
feature  still  works  with 
Google  Chat,  though.) 

It’s  tough  to  feel  bad 
for  anyone  involved 
here.  Google  offered  free 
beer  as  an  experimental 
feature;  it  had  the  right 
to  turn  off  the  tap.  Inner 

■  You  probably 
have  some  users 
who  depend  on 
even  kludgier 
arrangements 
thim  Infinite  SMS. 


Fence  knew  its  promise 
of  infinite  beer  depended 
on  someone  else’s  lar¬ 
gess.  And  the  Infinite 
SMS  users  paid  99  cents 
for  all  the  beer  they  could 
drink  —  at  least  before 
the  tap  went  dry. 

They  really  should 
have  known  it  would. 

Here’s  a  more  impor¬ 
tant  issue:  You  probably 
have  some  users  who 
depend  on  even  kludgier 
arrangements  than  Infi¬ 
nite  SMS. 

Maybe  they  connect  to 
office  systems  from  home 
using  their  neighbor’s 
Wi-Fi  (perhaps  without 
even  realizing  that’s  what 
they’re  doing).  Maybe 
they’re  routing  all  their 
e-mail  through  Gmail, 
which  went  down  again 
last  week  for  some  users. 
Maybe  they  lean  heavily 
on  instant  messaging  or 
Twitter  or  some  other 
free  service  that  could  go 
away  without  warning. 

And  maybe  you’ve 
encouraged  them  to  do 


just  that.  In  these  days  of 
free  services  and  tight- 
as-a-drum  IT  budgets, 
it's  tempting  to  tell  users 
to  go  with  freebies  as  an 
alternative  to  your  IT 
shop’s  officially  sanc¬ 
tioned  technology. 

That  may  even  be  a 
good  thing  —  i/you’ve 
given  the  freebie  a  care¬ 
ful  vetting,  and  if  there’s 
nothing  mission-critical 
depending  on  it,  and  if 
security  and  confidential 
data  aren’t  at  risk.  (Even 
then,  Wi-Fi  unintention¬ 
ally  provided  by  a  neigh¬ 
bor  is  likely  a  bad  idea.) 

But  even  if  a  freebie 
is  safe  and  usable,  it’s 
still  worth  remembering 

—  and  reminding  users 

—  that  you’re  likely  to  get 
what  you  pay  for.  There’s 
no  uptime  requirement 

service-level  agreement. 
They  could  go  down 
without  warning,  wheth¬ 
er  as  a  result  of  technical 
issues,  financial  problems 
or  some  flaw  in  the  busi- 

And  it’s  probably  worth 
remembering  that  no 
matter  how  infinite  the 
promise  of  technology 
may  be,  somebody  some¬ 
how  has  to  pay  the  bill. 

Otherwise,  it  is  too 
good  to  be  true.  ■ 

Frank  Hayes  is  Computer- 
world’s  senior  news 
columnist.  Contact  him 
at  frank_hayes@ 
computenvorld.com. 
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